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Abstract 



We give the first exponential separation between quantum and classical multi-party 
f~| I communication complexity in the (non-interactive) one-way and simultaneous message 

Qh| passing settings. 

For every k, we demonstrate a relational communication problem between k parties 
^ I that can be solved exactly by a quantum simultaneous message passing protocol of cost 

O (logn) and requires protocols of cost n'^/'^ , where c > is a constant, in the classical 
non-interactive one-way message passing model with shared randomness and bounded 
error. Thus our separation of corresponding communication classes is supcrpolynomial 

as long as fc = o ( W i^°f^Jg „ j and exponential for k = 0{1). 

> 

^ ■ 1 Introduction 

oo 

O 



In this paper we study quantum computation from the perspective of communication com- 
plexity. In the two-party model, defined by Yao |Y79j . two players are to compute a function 
I of two variables x and y, each knowing only one of the variables. The complexity measure 

■ is the number of bits they need to exchange in the worst case. In general players may use 

shared randomness. 

^ I An important generalization is the multi-party communication complexity. In this paper 

^ ' we shall study the most important version of multi-party communication, the number on a 

forehead model, defined by Chandra, Furst and Lipton |CFL83j . In this case a function of 
k variables xi, . . . ,Xk is computed by k players each knowing A; — 1 of the variables, namely 
player i knows xi, . . . , Xj+i, . . . , x^. The definition naturally generalizes to the case 
of relational problems (or relations), where for a given input there may be several correct 
outputs, or none. 

Obviously, the case of fc = 2 players coincides with the standard two-party model. On 
the other hand, proving lower bounds for k > 2 players is usually much harder, since they 
share some common information. 
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It has been established that quantum communication is exponentially more efficient in a 
number of versions of the two-party model, see |BCW98l lR99l IBCWWOll IB JK04[ IGKKRW07[ 
IG07j . The model of multi-party quantum communication has been defined by Kerenidis |K07j . 
In this paper we shall give the first exponential separation between quantum and classical 
multi-party communication complexity. 

We shall consider two versions of the non-interactive model. In the one-way message 
passing model, the first k — 1 players send one message each to the /c'th player. The latter 
is supposed to give an answer based on the received messages and his portion of input0 In 
the simultaneous message passing (SMP) model, each of the k players sends a single message 
to a referee, who is supposed to answer based solely on the received messages. Of course, 
the model of SMP is, in general, weaker than the one-way model, because the answering side 
(the referee) does not have free access to any piece of input. 

We shall show an exponential separation between quantum and classical probabilistic 
communication complexity in these models. Specifically, for every k we construct a relation 
and a quantum protocol that uses O (log n) quantum bits to solve the problem exactly in 
the SMP model, and prove that its classical probabilistic communication complexity is n^^^\ 
even if we allow bounded error. 

The exponent in the lower bound decreases with the number of players as l/k"^, as long 
as A; < ci • \/log n, c\ > 0. Thus we get superpolynomial separation as long as the number of 
players is in o ^ jjgiog^ ^ ; and exponential separation for constant number of players. The lower 
bound still holds for the stronger model of classical non-interactive one-way communication, 
even if we allow public randomness (our protocol, like any exact protocol, does not need 
randomness). 



2 Definitions and notation 



We write log to denote the logarithmic function with base 2. 

Let P C X\ X • • • X Xfc X Z, where X\, . . . , ^ {0, 1}" are the domains of arguments 
and Z C {0, 1}* is the range of the relation P. We say that a fc-party protocol S solves P 
with error bounded by e if the following holds 

• S describes behavior (i.e., which message is sent in every possible case, who produces 
the answer, and when) by the k players and (optionally) the referee. 

• If xi G Xi, . . . , Xfc E Xk are arguments to P such that the set G Z\{xi, . . . ,Xk,z) G P} 
is not empty, and for 1 < i < fc, the z'th player is given the values of xi, . . . ,Xj_i, 
Xj+i, . . . , Xk, then the answer zq ^ Z produced by S is correct (i.e., {xi, . . . , Xk, zq) £ P) 
with probability at least 1 — e. 

The cost of S is the maximum possible total number of bits (classical or quantum) commu- 
nicated before an answer is produced. 

We call a protocol (non-interactive) one-way if the first k — 1 players send at most one 
message each to the fc'th player, and no other communication occurs; after that the player k 
produces an answer. 

^Note that we consider the non-interactive one-way model, as opposed to the following possible scenario: 
Alice, Bob and Charlie use a protocol, where Alice sends a message to Bob, after that Bob sends a message 
to Charlie, who in turn produces an answer. Cf. Section (5] 
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We call a protocol simultaneous message passing {SMP) if each player sends at most one 
message to the referee, and no other communication occurs; after that the referee produces 
an answer. 

We shall consider the following problem. The input consists of A: — 1 indices ai, . . . , at-i 
and a string c of n bits. The indices jointly determine a matching on {1, . . . , n}. The parts 
of the input are distributed among the k players as usual, thus each of the first k — 1 players 
knows k — 2 indices and c, whereas player k knows all the indices, but does not know c. The 
goal is to compute ii , ^2, Qi © Ci2 > where («i , ^2) is an edge of the matching determined by the 
indices. 

Now we shall describe the problem formally. Let = be a family of t{n) 

edge-disjoint perfect matchings over n nodes and M = {Mn}neN- Since the matchings m\^^ 
are disjoint, we have t{n) < n. 

Definition 1. Let 2 < k < log(t(n)), such that log(t(n)) is a multiple of A; — 1, and let 
r{n) =^ ^"siti^-)) ^ (, £ {0,1}" and ai, . . . ,ak-i G {0, 1}'''-"''. Denote by o concate- 

nation of binary strings; interpret ai o • • • o a^-i as an integer between 1 and 2('^~^)''("'). 
Then (ai, . . . ,afc_i,c, (n,i2,Cii © CiJ) G HMP^'''^ if ai o • • • o ak-i < t{n) and («i,i2) G 

(n) 



3 A quantum protocol for HMP^^j'^^ 

Proposition 1. There exists a quantum k-party SMP communication protocol that exactly 
solves HMP^^'^'' using O (logn) quantum hits for any M . 

Proof. Recall that |-/Vf„| < n. Consider the following protocol. 

• Player 1 sends the quantum state 



1 



n . 
1=1 



to the referee, which is [logn] quantum bits. 

• Player k determines (based on his input) the matching ma"jo.--oafe_i and sends its index 
to the referee. That costs [log(|M„|)] < [logn] (classical) bits. 

• The referee performs a projective measurement in the orthogonal basis 

± 1^2) (il,i2) G m-a^o-oak-i^ ■ 

When he obtains |ii) + \i2) i\ii) — K2))i then © = (q^ © = 1, respectively), 
and the answer is produced accordingly. 
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4 Lower bound for solving HMP^j' in the classical model 

In this section we show that for some choice of M solving HMP^'^^ in the classical non- 
interactive one-way model allowing bounded error and shared randomness is expensive. 

Lemma 4.1. For every £1,62 > there exists a constant C such that for every k and n 
the following holds. If a one-way k-party protocol S of cost I uses shared randomness and 
solves HMPjl^'^^ with error bounded by ei, then for any constant 62 there exists a protocol 
S' , satisfying 

(n k) 

• S' solves HMP^p ' with error at most ei +62, for every possible input; 

• 5' has communication cost at most (logn)*^ • I; 

• the senders (first k — 1 players) are deterministic, the recipient (k'th player) may use 
private randomness. 

Intuitively, the lemma says that we can "partially derandomize" the protocol 5, preserving 
its correctness in distribution-free setting (which would not be the case if we simply applied 
the Min-Max Theorem). 

Proof of Lemma \4.1\ We shall apply a result of Newman [N91j . Proposition 1.1, that shows 
that the number of shared random bits can be reduced to constant time the logarithm of 
the input size. More precisely, there exists absolute constants ci,C2 such that for every 
e, (5 > 0, every protocol that uses / communication bits and solves the problem with error 
e can be replaced by a protocol that uses at most cil communication bits, C2logn random 
bits (where n is the input size) and has error < e + 5. This theorem was proved only for the 
two party communication complexity, however the proof is completely general and works for 
any number of parties and essentially any special way of communication. In particular, the 
constants ci,C2 do not depend on the number of players. 

Let S be as suggested by the lemma. Applying Newman's result we conclude that some 
protocol 5*1 uses only O(logn) shared random bits (and no private randomness), has cost / 

(n k) 

and solves HMPj^' with error at most ei + 82/2. 

Then there exists a protocol ^2 of cost / -|- O (log n) , solving the problem with the same 
error, but with public randomness shared only between the first k — 1 players (in 5*2, one of 
the senders appends to his message the content of the random string). 

Now let us consider the following communication task between the first k — 1 players: 
They receive same input as the first k — 1 players of 52, and their goal is to produce messages 
which would, according to 52, cause the fc'th player to produce a correct answer (the fc'th 
player is deterministic in 52, thus the problem is well-defined). Observe that all fc — 1 players 
share the knowledge of c, so only the part of input which determines m € M„ is not available 
to each player separately. Note also that the protocol 52 ("restricted" to the first k — 1 
players) solves this problem with error at most ei +82/2. Recall that |M„| < n. We apply 
Newman's theorem for the second time, concluding that there exists a protocol allowing the 
first k — 1 players to accomplish their task with success probability at least 1 — ei — £2 using 
O (log (log(|M„|))) = O (loglogn) shared random bits. 
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Therefore, there exists a protocol S3 of cost l + O (logn) that solves HMP^' with error 
at most ei + £2, uses O (log log 77,) random bits shared between the first k — 1 players and no 
other randomness. 

Finally, let us derandomize the first k — 1 players of 6*3. They share O (log logn) random 
bits, they can take one of (logn)'^^^^ possible values. Define S' as follows. Let each of the 
first k — 1 players send the sequence of messages which he would send, according to 5*3, with 
respect to all possible values of random bits. The recipient (fc'th player) randomly chooses 
one possible value of the random bits, considers only those parts of the messages which 
correspond to that value and acts according to 5*3. This protocol satisfies the requirement of 
the lemma. ■Lemmagj] 

4.1 On the families of perfect matchings 

We will construct a family M' of perfect matchings that makes HMP^,^^ hard for the clas- 
sical model. Our construction is based on some results in extremal graph theory concerning 
the number of edges in graphs with forbidden subgraphs. Let 

ex{n,{Gi,...,Gj}), 

denote the maximal number of edges that a graph on n vertices can have without containing 
any of the graphs Gi, . . . ,Gj as (not necessarily induced) graphs. These numbers have been 
studies especially for cycles Cd- By a result of Bondy and Simonovits |BS74| 

ex{n, {C2d}) < 90dn^+^/'^. 

Lower bounds of the form 

ex(n, {C3, C4, . . . , G2d}) = J7(ni+2/(3'^+-)), 

have been shown by Lubotzki, Phillips and Sarnak (with u = 3) |LPS88j and Lazebnik, 
Ustimenko and Woldar |LUW95] (with = —2 and = —3, depending on the parity of v). 
These bounds were obtained using explicit constructions. These constructions are, moreover, 
bipartite regular graphs (i.e., the degrees of all vertices are equal). 

Our main combinatorial lemma is an immediate corollary of these results. 

Lemma 4.2. For every d and every prime power t there exist a number n and a bipartite 
t-regular graph Gn^ on n vertices such that 

1. n< t^'^, 

2. Gn.d can be decomposed into t disjoint perfect matchings, 

3. every set of edges E spans at least \E\^~^/^'^'^^^ /90d vertices. 

Proof. In |LUW95j Lazebnik et al. constructed i-regular bipartite graphs satisfying the first 
condition and such that they do not contain C2d- It is well-known that regular bipartite 
graphs can be decomposed into edge-disjoint perfect matchings. (Namely, one can easily 
check that the assumption of Hall's theorem is satisfied, hence the graph contains a perfect 
matching. If we delete the edges of this matching the remaining graph is still bipartite and 
regular.) The condition about forbidden cycles implies 3., according to the result of Bondy 
and Simonovits |BS74] . ■ 
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For our lower bound on /c-party communication complexity we need the number of match- 
ings be of the form t = 2'^^^~^\ therefore we shall consider only powers of 2. For a t of this 
form, let n and Gn,2k be the number and the graph from the lemma. We shall define a family 
of perfect disjoint matchings M^^k = {'iTif''^^)\^-^ to be the perfect matchings of Gn,2k- It 
would be more natural to parametrize this family by r and k, since for each pair r and k we 
have one such family of matchings (with t = 2^(*^~^) and n < 23'=('=-i)''). "We use n instead of 
r, since it indicates the size of inputs. For future reference we note that 

t > n'/'\ 

4.2 Lower bound for HMP^^'^^ 

First we recall some properties of the mutual information of random variables that we shall 
need in the proof. Let X and Y be random variables, then we define their mutual information 

by 

/(X;Y) = H(X)+H{Y) - H(X,Y) = H(X) - H(X\Y), 
where H is entropy. We shall need the following facts: 

1. H{X\Y) = Zy ^(X| Y = y) ■ Pr{Y = y). 

2. /(X; Y|Z) = Y.Z -^(X; Y|Z = z) • Pr(Z = z). 

3. If Yi, . . . , Y„ are independent, then 

I(X;Yi,...,Y„) >^/(X;Y,). 



The first fact follows from the definition by direct computation. The second one is a conse- 
quence of the first one. To prove the third fact, write 

/(X; Yi, . . . , Y„) = F(Yi, . . . , Y„) - H{Yi, . . . , Y„|X). 

Then express the first term as the sum of entropies and apply the subadditivity of entropy 
to the second term. 

We shall also use Markov's inequality in the following form. If < X < /? and < q < /9, 
then 

PKX>a)>^i^, 

p — a 

where E denotes expectation. 

Theorem 4.3. For every e > there exists a constant 7 > such that for every k > 2, 
k = o (y^J^^^^^ J o,^y non- interactive one-way protocol solving HMPj^^'^^ with error ^ — e 
has to communicate at least n'^/^'^ hits of information. 

Proof of Theorem 14-^ Let n be fixed. Recall that t > n^/^^ and r = logt/(A: — 1). 

Let be a A;-party protocol of cost I, satisfying the theorem requirement. Let 1/2 — e be 
the guaranteed upper bound on the error probability of S. Let S' be another protocol with 
error at most 1/2 — e/2, as guaranteed by Lemma |4.1[ 
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Let c G {0, 1}" and consider the 2^^ inputs of the form 

k-2 

(«!,..., Q;fc_2,^ai,c). 

i=l 

We interpret strings Oi in the sum as vectors in GFJ. Notice that for any subset oi k — 2 
of the first k — 1 coordinates we get all 2^'^"^)'' values of the k — 2-tuples of strings. Let w 
be concatenation of the strings of messages that the first k — 1 players send to player k for 
these inputs, assuming they are using the protocol S' . Since each of these players can see 
only k — 2 coordinates from the first k — 1 coordinates, the string w encodes all messages that 
they ever send for the given string c. 

Recall that by Lemma [4. II the first k — 1 players in S' are deterministic, and therefore for 
every tuple (ai, . . . , a/c-i) we can, using w, prepare the k — 1 messages which are received by 
the A;'th player when the input is (ai, . . . , ak-i,c) (and the input of the fc'th player himself is 
Ok-i, i.e., the encoding of the matching). Consequently, for each matching m £ Mn,k 
it is possible to obtain, using the information contained in u), a triple (ii,Z2,e), such that 
(ii, 12) G m and e = Cj^ ®Ci^ with probability at least 5 + |. Consider the following algorithm 
that constructs a string of pairs of indices A and a string of bits B using w as the input. 

1. Let A and B be empty strings initially. 

2. Let m G Mn^k, such that every edge in m has at most one endpoint in the support of 
the pairs of A. If no such matching exists, halt. 

3. Using w, get a triple {ii,i2, e), such that (ii, i2) G and e = Cj^ © Cjj with probability 
at least | + f (this is the answer that player k produces given the messages of the 
players 1, . . . ,k — 1 and the matching m). 

4. Let A := Ao {n, ^2} and B := B o e. 

5. Return to Step 2. 

It follows from the properties of M^^k that if we take one edge from each m' G M^^k 
then at least t 2fc+i /180A; vertices are touched by those edges. Therefore, as long as \A\ < 
t 2k+i /180k, it is possible to find m G M„.fc which satisfies the requirement of Step 2. On 
the other hand, each iteration of the algorithm adds at most 2 new elements to A, therefore 
the algorithm always performs at least it^~2fc+i /180/c iterations. Let s be the least number 
of the steps of the algorithm (the lengths of the strings A and B), thus 

s>t^-2W+i/360k. (1) 

We shall show that the mutual information between {A,B) and c is r2(s). Intuitively it 
seems clear, because the pairs A chosen by the algorithm form a tree, thus the bits Cj^ © Cjj 
are independent, and e = Cj^ © Cjj with probability at least ^ + |. Notice, however, that the 
pairs in A and the bits in B are not independent, as we are choosing next matching according 
to the outcome of the previous stage. Therefore a formal proof of this fact is needed. 

Consider the following random variables. 



7 



• C - the uniform distribution on the strings c G {0, 1}". 

• W - the distribution on the strings w when the uniform distribution on the strings c 
is uniform; thus W is a function of C. 

• A and B - the distribution on the strings produced by the above algorithm when the 
distribution on strings c is uniform; these random variables can be viewed as functions 
of W and some random variable independent of C (the random bits of player k). 

The assumption about A and B can be stated as follows. For every j = 1, . . . , s, 

Pr(B, = C(A,),©C(A,),)>^ + |. 

Our proof of the theorem is based on estimating /(A,B;C) in two ways. The upper 
bound is easy: 

I(A, B; C) < /(W; C) < H{W) < |W|, (2) 

since A, B are functions of the random variable W and a random variable independent of C. 
To prove a lower bound on /(A, B; C), we consider two cases. 

(1) H{C\A) < n — S^s. Here ^ > is a sufficiently small fraction of e that will be specified 
later. In this case 

/(A, B; C) > /(A; C) = H{C) - H{C\A) > n - {n - ^s) = ^s. 



(2) H{C\A) > n — ^s. Observe that according to the chaining rule 

/(A,B;C) = /(A;C) +/(B;C|A) > /(B;C|A). 

Hence it suffices to estimate /(B; C| A). 

Let D be the random variable whose value is the number of indices j such that Bj = 
C(Aj)i ffi C(Aj)2- The assumption about the correctness of the protocol implies that 

E{-D) > {l/2 + e/2)s, 

Consider the mapping 

A ^ S(D|A = A) 

as a random variable. Let 

Ai(^) =df E{B\A = A)> (1/2 + e/4:)s. (3) 

By Markov's inequality, 

Pr(Ai(A))= Yl Pr{A = A)>-^^>el2. (4) 

Let 

A2(^) =df H{C\A = A)>n- -^s. 
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In a similar fashion, we get 

Pr(A2(A)) > 1 - |. 

Whence 

Pr{A2{A) A A2{A) > e/2 - e/4 = e/4. 

By (HD, 

I{B;C\A) = J2mC\A = A).Pr{A = A)>j. min /(B;C|A = ^). (5) 

^ 4 A;Ai{A)AA2{A) 

So it remains to estimate /(B; C| A = A) for ^4 satisfying Ai A A2. 

Let such an A be fixed. Let Cj be the random variables defined as follows. For j = 
1, . . . , s, let Cj = Cj^ © Cjj where (zi, ^2) is the j-th pair of a. For the rest of indices j, we 
set each C'j to be equal to Cj for some i, so that the variables C'j are independent. Then 
the information contained in C and C is the same, so we can replace the first by the second. 
Thus 

I(B;C|A = ^) =/(B;C'|A = ^) > ^ /(B; C'j| A = A) > 

j 

s s 

^(B; C'j\A = A)>Y, H^j;C'j\A = A). 

By Ai{A) (and Markov's inequality again), there are at least |s indices j, 1 < j < s, 
satisfying 

Pr(B,=C;.|A = A)>i + |. (6) 

By A2(^), 

H{C'j\A = A)> H{C'\A = A) = H{C\A = A)>n- —s. 

j 

Hence there are at least > n — indices j, 1 < j < n such that 

H{C'j\A = A) >l/2. (7) 

Thus there are at least js — ^-s indices j, I < j < s that satisfy both and d?]). Setting 

2 

^ ~ M' ^^^^ number is |s. For such indices I(Bj', Cj\A = A) > 6, where 6 > depends only 
on e, whence 

/(B;C'|A = ^) > —s. 

8 

By dl]) and ([1]) we have 

/(A,B;C) > i|s>r?ti"^/A;. (8) 

where r] = g| . To get our lower bound on the communication complexity, we shall compare 
the bounds ([2D and ([S]). Recall that w consists of 2^^~'^^^' messages, each having length at 
most (logn)'-' • I, for some constant C. Thus 

/(A,B;C) < |W| <2('=-2)''(log?i)^-/ = 2('=-2)^(logn)^-/ = 
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t'=-i(logn)'^ • / < i fe-i(logn)'^ • L 
Comparing this with the lower bound ([5]), we get 

i_ -L(^ l—") 1 

r/tfc-i 2*=+! ^ rjn-''kyk-i 2k+i) ^ 7771,61^ ^ ^/^2 

~ /c • (logn)"-^ ~ k ■ (logn)'^ ~ k ■ (logn)*^ ~ ' 

for a sufficiently small constant 7, as A;^ ^ ^ Jg°fog\i ) • ^Theorem\4l\ 

The theorem together with the protocol given in Proposition [1] for Proposition [1] leads to 
the following corollary: 

Corollary 4.4. For k{n) = o k)|kjgn) ' ^^^^^^ exists a k-party relational communication 
problem that can be solved exactly by a quantum simultaneous message passing protocol of cost 
O (logn) and requires superpolynomially more expensive protocols in the model of probabilistic 
non-interactive one-way communication with public randomness. For k = O (1) we get an 
exponential gap. 



5 Open problems 

• Extend the statement of Corollary 14.41 to bigger values of k. 

• Give a separation similar to the one shown here through a (partial) function. How 
much can be saved by using quantum communication for total functions? 

• Give a separation for the multi-party interactive setting. Even the case of three players 
and one-way interactive message passing (i.e., Alice speaks to Bob, after that Bob 
speaks to Charlie, who, in turn, responds) looks very interesting. 
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